Skip to content

Instantly share code, notes, and snippets.

@Zobber

Zobber/Suricata IDS Stats

Created April 26, 2020 21:48
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Zobber/ef2853da47923642118536ebcbb4704b to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Zobber/ef2853da47923642118536ebcbb4704b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Suricata IDS Stats
#Suricata_IDS stats
cat eve.json | jq -c 'select(.alert.signature) | [.alert.signature]' |sed 's/"//g;s/\[//;s/\]//' | awk '{a[$0]++;}END{for (i in a)print i, a[i]}' FS=, OFS=, |sort -k2 -nrt, | head -n20 | ag -v package | termgraph --title "Estadística de Alertas" --width 300
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment